CVE

Id
57598  
CVE No.
CVE-2012-4355  
Status
Candidate  
Description
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4354.  
Phase
Assigned (20120819)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
594163 57598 CVE-2012-4355 MISC:http://aluigi.org/adv/winlog_2-adv.txt  View
594164 57598 CVE-2012-4355 MISC:http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf  View
594165 57598 CVE-2012-4355 CONFIRM:http://www.sielcosistemi.com/en/news/index.html?id=70  View
594166 57598 CVE-2012-4355 SECUNIA:49395  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28685 JVNDB-2012-004392 Apache HTTP Server 用 mod_pagespeed モジュールにおけるクロスサイトスクリプティングの脆弱性 Apache HTTP Server 用 mod_pagespeed モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4360 57598 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004392.html  View